Database Administration (MOSC)

MOSC Banner

Oracle still auditng events after NOAUDIT

edited Nov 8, 2019 10:07AM in Database Administration (MOSC) 6 commentsAnswered ✓

We're redoing what is and isn't being auditing in a database my team has been put in charge of. Old audit settings were producing ~2M audit entries a day. Audit_trail parameter is set to DB.

So we wipe everything that is being auditing out with NOAUDIT commands, run the audit commands of our bare minimum, and then see how many entries are created come the next day. It's the same rate with the same ratio of specific kinds of entries (ie. hundreds of thousands of successful select statements). In this case we audited select table whenever not successful to start out, so the successful selects should = 0.

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center